What’s Vulnerable › Vulnerabilities

CVE-2025-39968: i40e: add max boundary check for VF filters

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-15 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request. Add it.

Affected products

• Linux kernel: 4.17 — fixed in 6.17

How to fix

Upgrade to a fixed version: Linux kernel 6.17. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/02aae5fcdd34c3a55a243d80a1b328a35852a35c
• https://git.kernel.org/stable/c/77a35be582dff4c80442ebcdce24d45eed8a6ce4
• https://git.kernel.org/stable/c/8b13df5aa877b9e4541e301a58a84c42d84d2d9a
• https://git.kernel.org/stable/c/9176e18681cb0d34c5acc87bda224f5652af2ab8
• https://git.kernel.org/stable/c/cb79fa7118c150c3c76a327894bb2eb878c02619
• https://git.kernel.org/stable/c/d33e5d6631ac4fddda235a7815babc9d3f124299
• https://git.kernel.org/stable/c/e490d8c5a54e0dd1ab22417d72c3a7319cf0f030
• https://git.kernel.org/stable/c/edecce7abd7152b48e279b4fa0a883d1839bb577

Get alerted when CVE-2025-39968 or the next vulnerability affects your stack